Stripe: List all issuing tokens for card

← Issuing operations · Get started

Operation stripe.getissuingtokens

Provider route: GET /v1/issuing/tokens. Alter supplies the connection’s credentials and routing.

Call through Alter

Install @alter-ai/sdk @alter-ai/stripe with npm, or alter-sdk-stripe with pip. Supply your connected customer’s grant ID and the arguments described below.

import { App } from "@alter-ai/sdk";
import { StripeIntegration } from "@alter-ai/stripe";

async function execute(input: Parameters<StripeIntegration["issuing"]["getIssuingTokens"]>[0]) {
  const app = new App({ apiKey: process.env.ALTER_API_KEY! });
  try {
    const provider = new StripeIntegration(app, { grantId: process.env.PROVIDER_GRANT_ID! });
    const call = await provider.issuing.getIssuingTokens(input);
    const result = await call.wait();
    return result.bodyJson();
  } finally {
    await app.close();
  }
}

import os
from alter_sdk import App
from alter_sdk_stripe import StripeIntegration

async def execute(arguments):
    async with App(api_key=os.environ["ALTER_API_KEY"]) as app:
        provider = StripeIntegration(app, {"grant_id": os.environ["PROVIDER_GRANT_ID"]})
        call = await provider.issuing.get_issuing_tokens(arguments)
        result = await call.wait()
        return result.body_json()

Input

Field	Type	Presence	Description and constraints
$	object	Root	Additional keys: not allowed
query	object	Required within parent	Additional keys: not allowed
query.card	string	Required within parent	Maximum length: 5000
query.created	JSON	Optional
query.created (anyOf 1)	object	Alternative
query.created (anyOf 1).gt	integer	Optional
query.created (anyOf 1).gte	integer	Optional
query.created (anyOf 1).lt	integer	Optional
query.created (anyOf 1).lte	integer	Optional
query.created (anyOf 2)	integer	Alternative
query.ending_before	string	Optional	Maximum length: 5000
query.expand	array	Optional
query.expand[]	string	Each item	Maximum length: 5000
query.limit	integer	Optional
query.starting_after	string	Optional	Maximum length: 5000
query.status	string	Optional	One of: active, deleted, requested, suspended

Response

Response media type: application/json. The table describes the pinned successful response. Referenced models link to their complete fields.

Field	Type	Presence	Description and constraints
$	object	Root
data	array	Required within parent
data[]	Model	Each item	Expand Update a token status — response body
has_more	boolean	Required within parent	True if this list has another page of items after this one that can be fetched.
object	string	Required within parent	String representing the object’s type. Objects of the same type share the same value. Always has the value `list`. Known values: list
url	string	Required within parent	The URL where this list can be accessed. Maximum length: 5000

Referenced models: Update a token status — response body

Schemas

35 more schemas are linked from the tables above, on the schema pages.

Update a token status — response body

Field	Type	Presence	Description and constraints
$	object	Root	An issuing token object is created when an issued card is added to a digital wallet. As a [card issuer](https://docs.stripe.com/issuing), you can [view and manage these tokens](https://docs.stripe.com/issuing/controls/token-management) through Stripe.
card	JSON	Required within parent	Card associated with this token.
card (anyOf 1)	string	Alternative	Maximum length: 5000
card (anyOf 2)	Model	Alternative	Expand Fail a testmode card — response body
created	JSON	Required within parent
created (anyOf 1)	integer	Alternative	Time at which the object was created. Measured in seconds since the Unix epoch. Format: unix-time
created (anyOf 2)	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
device_fingerprint	JSON	Optional
device_fingerprint (anyOf 1)	string	Alternative	The hashed ID derived from the device ID from the card network associated with the token. Maximum length: 5000
device_fingerprint (anyOf 2)	null	Alternative
id	string	Required within parent	Unique identifier for the object. Maximum length: 5000
last4	string	Optional	The last four digits of the token. Maximum length: 5000
livemode	boolean	Required within parent	If the object exists in live mode, the value is `true`. If the object exists in test mode, the value is `false`.
network	string	Required within parent	The token service provider / card network associated with the token. Known values: mastercard, visa
network_data	Model	Optional	Expand Update a token status — response body — network data
network_updated_at	JSON	Required within parent
network_updated_at (anyOf 1)	integer	Alternative	Time at which the token was last updated by the card network. Measured in seconds since the Unix epoch. Format: unix-time
network_updated_at (anyOf 2)	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
object	string	Required within parent	String representing the object's type. Objects of the same type share the same value. Known values: issuing.token
status	string	Required within parent	The usage state of the token. Known values: active, deleted, requested, suspended
wallet_provider	string	Optional	The digital wallet for this token, if one was used. Known values: apple_pay, google_pay, samsung_pay

Referenced models: Fail a testmode card — response body, Update a token status — response body — network data

Update a token status — response body — network data

Field	Type	Presence	Description and constraints
$	object	Root
device	Model	Optional	Expand Update a token status — response body — network data device
mastercard	Model	Optional	Expand Update a token status — response body — network data mastercard
type	string	Required within parent	The network that the token is associated with. An additional hash is included with a name matching this value, containing tokenization data specific to the card network. Known values: mastercard, visa
visa	Model	Optional	Expand Update a token status — response body — network data visa
wallet_provider	Model	Optional	Expand Update a token status — response body — network data wallet provider

Referenced models: Update a token status — response body — network data device, Update a token status — response body — network data mastercard, Update a token status — response body — network data visa, Update a token status — response body — network data wallet provider

Create a cardholder — response body

Field	Type	Presence	Description and constraints
$	object	Root	An Issuing `Cardholder` object represents an individual or business entity who is [issued](https://docs.stripe.com/issuing) cards. Related guide: [How to create a cardholder](https://docs.stripe.com/issuing/cards/virtual/issue-cards#create-cardholder)
billing	Model	Required within parent	Expand Create a cardholder — response body — billing
company	JSON	Optional
company (anyOf 1)	JSON	Alternative	Additional information about a `company` cardholder.
company (anyOf 1) (anyOf 1)	Model	Alternative	Expand Create a cardholder — response body — company value tax id provided
company (anyOf 2)	null	Alternative
created	JSON	Required within parent
created (anyOf 1)	integer	Alternative	Time at which the object was created. Measured in seconds since the Unix epoch. Format: unix-time
created (anyOf 2)	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
email	JSON	Optional
email (anyOf 1)	string	Alternative	The cardholder's email address. Maximum length: 5000
email (anyOf 2)	null	Alternative
id	string	Required within parent	Unique identifier for the object. Maximum length: 5000
individual	JSON	Optional
individual (anyOf 1)	JSON	Alternative	Additional information about an `individual` cardholder.
individual (anyOf 1) (anyOf 1)	Model	Alternative	Expand Create a cardholder — response body — individual value card issuing, dob, first name, last name, verification
individual (anyOf 2)	null	Alternative
livemode	boolean	Required within parent	If the object exists in live mode, the value is `true`. If the object exists in test mode, the value is `false`.
metadata	object	Required within parent	Set of [key-value pairs](https://docs.stripe.com/api/metadata) that you can attach to an object. This can be useful for storing additional information about the object in a structured format. Additional keys: see wildcard field
metadata.*	string	Additional keys	Maximum length: 500
name	string	Required within parent	The cardholder's name. This will be printed on cards issued to them. Maximum length: 5000
object	string	Required within parent	String representing the object's type. Objects of the same type share the same value. Known values: issuing.cardholder
phone_number	JSON	Optional
phone_number (anyOf 1)	string	Alternative	The cardholder's phone number. This is required for all cardholders who will be creating EU cards. See the [3D Secure documentation](https://docs.stripe.com/issuing/3d-secure#when-is-3d-secure-applied) for more details. Maximum length: 5000
phone_number (anyOf 2)	null	Alternative
preferred_locales	JSON	Optional
preferred_locales (anyOf 1)	array	Alternative	The cardholder’s preferred locales (languages), ordered by preference. Locales can be `de`, `en`, `es`, `fr`, or `it`. This changes the language of the [3D Secure flow](https://docs.stripe.com/issuing/3d-secure) and one-time password messages sent to the cardholder.
preferred_locales (anyOf 1)[]	string	Each item	Known values: de, en, es, fr, it
preferred_locales (anyOf 2)	null	Alternative
requirements	Model	Required within parent	Expand Create a cardholder — response body — requirements
spending_controls	JSON	Optional
spending_controls (anyOf 1)	JSON	Alternative	Rules that control spending across this cardholder's cards. Refer to our [documentation](https://docs.stripe.com/issuing/controls/spending-controls) for more details.
spending_controls (anyOf 1) (anyOf 1)	Model	Alternative	Expand Create a cardholder — response body — spending controls value allowed card presences, allowed categories, allowed merchant countries, blocked card presences, blocked categories, blocked merchant countries, spending limits, spending limits currency
spending_controls (anyOf 2)	null	Alternative
status	string	Required within parent	Specifies whether to permit authorizations on this cardholder's cards. Known values: active, blocked, inactive
type	string	Required within parent	One of `individual` or `company`. See [Choose a cardholder type](https://docs.stripe.com/issuing/other/choose-cardholder) for more details. Known values: company, individual

Referenced models: Create a cardholder — response body — billing, Create a cardholder — response body — spending controls value allowed card presences, allowed categories, allowed merchant countries, blocked card presences, blocked categories, blocked merchant countries, spending limits, spending limits currency, Create a cardholder — response body — company value tax id provided, Create a cardholder — response body — individual value card issuing, dob, first name, last name, verification, Create a cardholder — response body — requirements

Create a cardholder — response body — billing

Field	Type	Presence	Description and constraints
$	object	Root
address	Model	Required within parent	Expand Create a Location — response body — address

Referenced models: Create a Location — response body — address

Policy, approvals and errors

SDK function policy ID: stripe.getissuingtokens. Catalog operation: GetIssuingTokens. Rules can name either ID; function rules distinguish managed calls and conservatively cover raw calls sharing the route. Existing grant permissions and policy rules apply. wait() returns an immediate result or waits for a required approval; it never approves the request itself. Persist the approval ID to resume after a restart.

Provider errors retain their response; JSON decoding raises ProviderAPIError for provider failures. ManagedOperationError identifies contract/input/retention errors. See error handling and provider-specific behavior. Sensitive input may be refused before approval storage. A decoding error never resubmits a write.

Pinned headers: {"Stripe-Version": "2026-09-30.endive"}

Official provider source